3 matches found
CVE-2020-28184
Cross-site scripting XSS vulnerability in TerraMaster TOS = 4.2.06 allows remote authenticated users to inject arbitrary web script or HTML via the mod parameter to /module/index.php...
CVE-2020-28184
Cross-site scripting XSS vulnerability in TerraMaster TOS = 4.2.06 allows remote authenticated users to inject arbitrary web script or HTML via the mod parameter to /module/index.php...
CVE-2020-28184
TerraMaster TOS vulnerable to Cross-site scripting (XSS) in versions 4.2.06 and earlier. The flaw allows remote authenticated users to inject arbitrary web script or HTML via the mod parameter to /module/index.php. This is documented across multiple sources (NVD, CNVD, Red Hat, CNVD CNVD-2020-751...